hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Harshakiran Reddy (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-13590) Retry until TGT expires even if the UGI renewal thread encountered exception
Date Tue, 12 Dec 2017 05:11:00 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-13590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16287119#comment-16287119

Harshakiran Reddy commented on HADOOP-13590:

Hi [~xiaochen], After this commit i am getting the bellow following exception before 5 hours
of my user  expires.

bin> ./hdfs dfs -ls /
2017-12-12 12:31:50,910 WARN util.NativeCodeLoader: Unable to load native-hadoop library for
your platform... using builtin-java classes where applicable
2017-12-12 12:31:52,312 WARN security.UserGroupInformation: Exception encountered while running
the renewal command for principal_name. (TGT end time:1513070122000, renewalFailures: org.apache.hadoop.metrics2.lib.MutableGaugeInt@1bbb43eb,renewalFailuresTotal:
ExitCodeException exitCode=1: kinit: KDC can't fulfill requested option while renewing credentials

        at org.apache.hadoop.util.Shell.runCommand(Shell.java:994)
        at org.apache.hadoop.util.Shell.run(Shell.java:887)
        at org.apache.hadoop.util.Shell$ShellCommandExecutor.execute(Shell.java:1212)
        at org.apache.hadoop.util.Shell.execCommand(Shell.java:1306)
        at org.apache.hadoop.util.Shell.execCommand(Shell.java:1288)
        at org.apache.hadoop.security.UserGroupInformation$1.run(UserGroupInformation.java:1067)
        at java.lang.Thread.run(Thread.java:745)
bin> klist
Ticket cache: FILE:/tmp/krb5cc_20024
Default principal: principal_name

Valid starting     Expires            Service principal
12/11/17 17:15:25  12/12/17 17:15:22  Service principal_name
bin> date
Tue Dec 12 12:40:16 CST 2017

> Retry until TGT expires even if the UGI renewal thread encountered exception
> ----------------------------------------------------------------------------
>                 Key: HADOOP-13590
>                 URL: https://issues.apache.org/jira/browse/HADOOP-13590
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 2.8.0, 2.7.3, 2.6.4
>            Reporter: Xiao Chen
>            Assignee: Xiao Chen
>             Fix For: 2.8.0, 3.0.0-alpha2
>         Attachments: HADOOP-13590.01.patch, HADOOP-13590.02.patch, HADOOP-13590.03.patch,
HADOOP-13590.04.patch, HADOOP-13590.05.patch, HADOOP-13590.06.patch, HADOOP-13590.07.patch,
HADOOP-13590.08.patch, HADOOP-13590.09.patch, HADOOP-13590.10.patch, HADOOP-13590.branch-2.01.patch
> The UGI has a background thread to renew the tgt. On exception, it [terminates itself|https://github.com/apache/hadoop/blob/bee9f57f5ca9f037ade932c6fd01b0dad47a1296/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java#L1013-L1014]
> If something temporarily goes wrong that results in an IOE, even if it recovered no renewal
will be done and client will eventually fail to authenticate. We should retry with our best
effort, until tgt expires, in the hope that the error recovers before that.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org

View raw message